Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: V5i99JG2DPn+biI3cGbqMNvpPwrBoa/EVgVZByQt5GM=
Subject key identifier: 76:81:AC:6D:31:CB:7D:E5:B4:AB:6B:1A:4C:56:67:50:65:5A:66:D9
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 01A0CE916141E5C73082F403A513F9601BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 146F
Signing time: Wed 23 Sep 2026 14:00:28 +0000
Manifest this update: Wed 23 Sep 2026 14:00:28 +0000
Manifest next update: Thu 24 Sep 2026 14:00:28 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: mtq1cO5DtXRnVqAd1E/DW8rJm9PMmblDIMbKhrqcWHc=)
2: CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa (hash: 5VuIA/sliXJSN13FjulNtyBF4Z5iaCwmwNeqLvTqwQc=)
3: zaVYapWVUgBMhU_JcYYvFP47i24.asa (hash: 8XrhcCbLyvo7InAuEJRmE6i6/OkGN5+Zgg9NXl4qux4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:61:41:e5:c7:30:82:f4:03:a5:13:f9:60:1b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Sep 23 14:00:28 2026 GMT
Not After : Sep 24 14:00:28 2026 GMT
Subject: CN=7681ac6d31cb7de5b4ab6b1a4c566750655a66d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:da:77:0e:1a:f1:e3:aa:f9:79:1c:84:13:
c2:e0:bb:bd:86:da:d1:8f:d5:1c:78:70:6c:d5:e7:
e1:e8:aa:4e:d9:98:4f:b2:b7:e9:e6:78:11:8c:04:
9d:2e:5d:59:3a:24:c8:da:be:03:ad:69:ff:fd:0e:
1a:77:dc:c5:10:68:07:fc:9e:d0:e6:fe:19:a5:65:
5b:6d:5a:9a:e1:e1:80:3a:aa:7a:5f:08:06:fe:13:
09:be:0a:f8:ab:7c:78:94:fc:af:6a:1d:27:2b:0e:
a8:15:f2:73:f8:fb:f0:30:2e:96:97:81:11:d4:4e:
47:62:77:ad:41:11:7d:3f:06:8d:4c:19:ae:1d:f3:
7a:63:20:52:7a:84:a9:f4:16:10:ef:56:f8:a3:58:
c4:07:a6:d7:22:65:54:8c:96:41:e2:d5:be:f1:48:
cc:77:bf:ba:18:1d:fa:6c:fa:a8:fb:be:3f:d5:77:
b1:1d:8b:15:43:48:22:e1:a3:85:b2:32:9c:49:15:
e2:81:16:57:a3:a9:0e:95:46:20:7e:29:7f:78:de:
fd:50:10:11:66:f1:b6:b0:59:91:d4:da:f6:cd:e8:
64:1c:02:c2:8f:eb:55:e0:3e:af:a5:a5:de:b4:f8:
dd:21:d3:a2:19:2b:94:e6:be:67:7f:7d:43:0a:11:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:81:AC:6D:31:CB:7D:E5:B4:AB:6B:1A:4C:56:67:50:65:5A:66:D9
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:39:79:80:81:6e:4f:80:7d:b5:fe:a7:80:6d:e5:4f:e5:eb:
5d:07:88:9c:1a:c6:e2:44:c6:ef:dc:a9:c1:64:c6:a6:46:36:
51:14:18:d9:45:64:f1:bf:c7:c6:c2:46:5d:d5:ad:67:0b:26:
42:a7:05:2b:8c:9c:f2:8e:c3:7e:26:02:b7:3b:47:4a:ff:4c:
44:98:ce:45:c8:c8:5a:59:c2:a5:d9:b3:96:17:0b:a3:3f:fd:
dd:d2:7d:24:6d:0f:74:16:e4:44:55:3d:45:36:36:1f:e9:a8:
b3:aa:96:85:22:c8:3e:7d:12:c5:bf:e5:1f:64:be:1e:e7:9e:
1d:43:86:4a:1c:54:57:74:bd:34:7c:1d:70:ad:82:7d:4f:22:
22:d0:08:31:49:2c:ba:83:d0:9b:ee:eb:c8:13:07:e0:6a:98:
74:cf:20:62:3d:a8:b6:4b:0c:c1:be:9e:7b:03:15:16:e1:fe:
86:e9:df:54:68:5d:5c:75:3a:a3:ed:ba:7e:63:06:4a:8c:50:
7b:1f:37:b2:79:bd:af:29:16:9c:df:6a:b5:11:a4:6f:ee:b1:
86:3c:12:dd:af:06:36:87:f1:c6:e3:96:78:b4:25:2d:b7:2c:
c5:13:61:0f:75:e2:46:21:09:ef:79:d4:60:ae:e8:d3:c4:a6:
f5:3e:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:49:12 2026 by rpki-client